diff --git a/nodes/heimdall/kitchenowl/compose.yaml b/nodes/heimdall/kitchenowl/compose.yaml
index a607359..9da996f 100644
--- a/nodes/heimdall/kitchenowl/compose.yaml
+++ b/nodes/heimdall/kitchenowl/compose.yaml
@@ -3,14 +3,20 @@ services:
     image: tombursch/kitchenowl-web:latest
     container_name: kitchenowl-front
     restart: unless-stopped
-    networks:
-      - proxy-net
-    # environment:
-    #   - BACK_URL=back:5000 # Change this if you rename the containers
-    ports:
-      - "10580:80"
+    environment:
+      - BACK_URL=back:5000
     depends_on:
       - back
+    networks:
+      - proxy-net
+      - kitchenowl-internal
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.kitchenowl.rule=Host(`kitchenowl.castaldifamily.com`)"
+      - "traefik.http.routers.kitchenowl.entrypoints=websecure"
+      - "traefik.http.routers.kitchenowl.tls.certresolver=cloudflare"
+      - "traefik.http.services.kitchenowl.loadbalancer.server.port=80"
+
   back:
     image: tombursch/kitchenowl-backend:latest
     container_name: kitchenowl-back
@@ -20,8 +26,10 @@ services:
     volumes:
       - /mnt/appdata/kitchenowl/data:/data
     networks:
-      - proxy-net
+      - kitchenowl-internal
 
 networks:
   proxy-net:
-    external: true
\ No newline at end of file
+    external: true
+  kitchenowl-internal:
+    internal: true
\ No newline at end of file